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Abstract 

Using a result of H. Hanche-Olsen, we show that (subject to fairly natural constraints on what 
constitutes a system, and on what constitutes a composite system), orthodox finite-dimensional 
complex quantum mechanics with superselection rules is the only non-signaling probabilistic 
theory in which (i) individual systems are Jordan algebras (equivalently, their cones of unnor- 
malized states are homogeneous and self-dual), (ii) composites are locally tomographic (meaning 
that states are determined by the joint probabilities they assign to measurement outcomes on 
the component systems) and (iii) at least one system has the structure of a qubit. Using this re- 
sult, we also characterize finite dimensional quantum theory among probabilistic theories having 
the structure of a dagger-monoidal category. 



1 Introduction and background 

One of the oldest foundational problems besetting quantum mechanics is to provide a clear mo- 
tivation for its probabilistic apparatus — in particular, for the representation of observables of a 
quantum system by the self-adjoint elements of a C* algebra. Why should outcomes of measure- 
ments give rise to anything so nicely structured as a C*-algebra — or any algebra at all, for that 
matter? In particular, what operational meaning can we give to the product of two non-commuting 
observables, when these cannot simultaneously be measured, and when, indeed, this product is not 
self-adjoint? 



1.1 Jordan algebras 



In an early attempt to address this question, Pascual Jordan [21] proposed in 1932 that the observ- 
ables associated with a finite-dimensional physical system should constitute what is now called a 
formally real Jordan algebra. A Jordan algebra is a finite-dimensional real vector space E equipped 
with a commutative bilinear operation • : E x E — > E satisfying the Jordan identity 

a 2 • (a • b) = a • (a 2 • b) 

for all a, b € E (where a 2 := a • a). Jordan algebras are naturally equipped with a bilinear trace 
form, which induces a symmetric, nondegenerate bilinear form (a, b) n> (a, b) := tr(a • b). If this 
is an inner product (that is, positive-definite), one calls E Euclidean. In finite dimensions, this is 
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equivalent to Jordan's condition of formal reality: that a 2 + b 2 = => x = y = 0. Two years later, 
Jordan, von Neumann, and Wigner [22] classified such algebras as being either (i) self-adjoint parts 
of (real, complex or quaternionic) matrix algebras, under the anti-commutator x • y = (xy + yx)/2, 
(ii) so-called spin factors, or (iii) the self-adjoint part of the 3-by-3 matrix algebra over the octonions, 
or direct sums of these. Thus, the assumption that the space of observables of a physical system is 
a Euclidean Jordan algebra does bring one very close to finite-dimensional quantum mechanics. 



1.2 General probabilistic theories 

An early objection to the Jordan- algebraic approach is that it does not generalize easily to the 
infinite-dimensional setting required for full-blown quantum mechanics. However, in recent years, 
with the growing importance of quantum information theory, finite-dimensional quantum theory is 
coming to be viewed as an important subject in its own right, and is even regarded (in some quarters) 
as being possibly more fundamental than more traditional, infinite-dimensional QM. Moreover, the 
introduction of the notion of JB-algebra has turned out to provide a fairly satisfactory generalization 
to infinite dimension. 

Leaving this issue to one side, another, and more basic, objection is that the Jordan product has no 
clearer an operational interpretation than the C*-algcbraic product. Later work has tended to start 
with a much more general (but conceptually much more transparent) framework [26, 20, 5], in which 
a physical — or, more broadly, probabilistic — system is represented by an order-unit space. This is 
an ordered real vector space E, with positive cone E + , equipped with a distinguished element u £ E + , 
called the order unit, such that for every a £ E + , ta < u for some t > 0. Possible measurement 
outcomes associated with the system are identified with effects, that is, vectors a £ E + with a < u. 
States of the system are identified with positive linear functionals a:E->l with p(u) = 1. If 
a is an effect, then a(a) is understood to be the probability that a will occur (if measured) when 
the state a obtains. Physical processes acting on a system, or between two systems, can then be 
represented very naturally by positive linear mappings between the associated ordered linear spaces, 
and one can define a probabilistic theory to be a category of such spaces and mappings. 

Within this very general setting (which we review in greater detail in Section 2), one can hope 
to find illuminating characterizations of quantum theory, that is, theorems that single out QM - 
particularly, complex QM — as the unique probabilistic theory satisfying one or more reasonable 
constraints. This was the goal, explicit or tacit, of a great deal of foundational work in quantum 
theory from roughly the 1950s to the late 1970s [26, 25]. With the emergence of quantum information 
theory, this project has enjoyed a strong revival, with a distinctive focus on finite-dimensional 
systems, and an emphasis on composite systems [19, 30, 17, 14, 12, 27], The cited papers all come 
close to, or indeed succeed in, deriving finite dimensional QM from simple axioms. However, many 
[19, 30, 12, 27] make use of a strong uniformity principle, namely, that all systems having the same 
information-carrying capacity (as variously defined) are isomorphic; others place strong constraints 
on the representation of sub-systems [19, 14]. We hope to avoid both kinds of assumptions. 



1.3 Homogeneity and self-duality 

A different approach, which we have pursued in [7, 8, 37, 38], is to exploit the classical correspondence 
between Jordan algebras and homogeneous self-dual cones. This is reviewed in more detail below, 
but, briefly: The positive cone E + of an ordered vector space E is homogeneous iff the group of 
order-automorphisms 1 of E acts transitively on the interior of E + , and self-dual iff there exists an 

1 That is, positive linear bijections having positive inverses 
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inner product on E such that 

E+ = E+ := {a G E|(a, b) > Vb G E+}. 

Theorem (Koecher [24], Vinberg [34]): Let E be a finite- dimensional order-unit space with a 
homogeneous, self-dual (HSD) cone E + . Then there exists a unique bilinear operation i:ExE->E 
making E into a Euclidean Jordan algebra with unit u and cone of squares equal to E + . 

In [7], we observed that a simple purification or dilation principle is enough to guarantee that the 
cone of states of a physical system is homogeneous and weakly self-dual, i.e., W + ~ E + . However, the 
distinction between weak self-duality and self-duality is significant, so this result still leaves us with 
two questions: first, why the state cone ought to be self-dual, and, secondly, how to rule out, or to 
make room for, the various alternatives to complex QM allowed by the Jordan- von-Neumann-Wigner 
classification. 

In this paper, we bracket the first question (to which several possible answers have been suggested; 
see [7, 8, 28, 37, 38]) and concentrate on the second. We consider a probabilistic theory in which (i) 
individual systems are represented by homogeneous, self-dual models — equivalcntly, by formally 
real Jordan algebras — and ask when these must in fact be standard quantum models, i.c, the 
self-adjoint parts of complex matrix algebras. 



1.4 Composites of homogeneous, self-dual systems 

As it happens, a nearly off-the-shelf answer is available. It has been known at least since [3] that 
complex QM is distinguished from its real analogue by a property called local tomography, which 
requires that the joint state of a composite system be completely determined by the joint probabilities 
assigned to observables on the two component systems. 2 In [18], H. Hanche Olsen made a similar 
point regarding Jordan algebras: 

Theorem (Hanche-Olsen, [18]): Let E2 be the Jordan algebra of hermitian 2x2 complex matrices, 
i.e., the Jordan algebra corresponding to a single qubit. Let~E be any JB algebra (in finite- dimensions, 
the same thing as a Euclidean Jordan algebra), and suppose that the vector space E ® E 2 carries a 
Jordan product satisfying 

(a <g> 1) • (b <S> v) = (a • b) <S> v and (1 ® v) • (a ® w) = a ® (v • w). (1) 

for all a, b G E and all v, w G E 2 . Then E is the Hermitian part of a C* -algebra. 

Of course, absent a direct physical or operational interpretation of the Jordan product, Hanche- 
Olsen's condition (1) calls for some further motivation. In Section 4, we show that in the context 
of composites of probabilistic models, (1) follows from local tomography — the condition that the 
joint state of a composite system is determined by the joint probabilities it assigns to outcomes 
of measurements on the two component systems — plus the condition that the self-dualizing inner 
product on a composite system can be chosen so as to factor into a product of self-dualizing inner 
products for the component systems. We call a theory satisfying the latter condition factorizably 
self-dual. By a factorizably HSD theory, we mean a probabilistic theory in which every system is 
homogeneous and factorizably self-dual. Hanche-Olsen's result then yields 

2 It is also observed in [3] that in the quaternionic analogue of complex quantum theory, the most obvious candidate 
for the state space of a composite of m-dimcnsional and n-dimcnsional quaternionic systems, namely the van X 
ran dimensional positive semidefinite (PSD) quaternionic matrices, suffers from difficulties in even identifying the 
product effects necessary to a locally tomographic composite — indeed, its dimension is smaller than the product of 
the dimensions of the spaces spanned by the raY.ni and by the n X n quaternionic positive semi-definite matrices. 
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Proposition 1. LetC be any factorizably HSD probabilistic theory in which (i) every pair of systems 
A and B admit a locally-tomographic composite system, AB, still belonging to C, and (ii) there exists 
a qubit. Then all systems in C are self-adjoint parts of complex matrix algebras. 

The factorizability assumption can itself be further motivated. In particular, it is automatically 
satisfied given two very weak and natural conditions, namely, that each component system support 
a uniform (or maximally mixed) state, and that every basic measurement outcome have probability 
one in some state. Given these assumptions, finite-dimensional QM is completely characterized 
among finite-dimensional HSD theories by conditions (i) and (ii) above. 

Proposition I has an important consequence for the categorical formulation of quantum theory in 
terms of dagger-monoidal categories [1, 4, 33]. Let C be a dagger-monoidal category whose objects 
are order-unit spaces, with the set of morphisms between any two objects being a cone of positive 
linear mappings between these spaces, with tensor unit / ~ R. If C(I, A) ~ A, then each object A is 
equipped with a canonical bilinear form, namely (a, b) = o b, which factors on tensor products. If 
this is an inner product, and the group of invertible elements of C(A, A) acts homogeneously on A, 
then the positive cone of A is self-dual. Thus, if tensor products in C are locally tomographic, non- 
signaling composites, and if C contains a qubit, then every order-unit space A e C is the hermitian 
part of a C* algebra. 

The balance of this note supplies the proof of Proposition 1, along with enough technical background 
to make the exposition self-contained. In Section 2, we give a more detailed sketch of the general 
probabilistic framework described above, and discuss the structure of models associated with formally 
real Jordan algebras. In Section 3, after discussing composite systems in general, we study locally 
tomographic composites of Jordan-algebraic sytems, and prove Proposition 1. In Section 4, we 
reconsider these ideas in the context of a dagger-monoidal category of probabilistic models. Section 
5 offers a few concluding remarks, questions, and speculative suggestions. 



2 Probabilistic Models and Theories 

In this section we provide a quick review of the framework for generalized probability theory that 
we shall use. This is fairly standard, with a history going back ultimately to the work of Mackey in 
the 1950s. The precise machinery we use combines ideas borrowed from [13, 20, 16], here specialized 
to finite-dimensional systems. 



2.1 States, Effects and Processes 

In its very simplest formulation, classical probability theory concerns an "experiment" — a single, 
discrete set E of mutually exclusive possible outcomes, and probability weights thereon. A par- 
ticularly simple (and, conceptually, very conservative) generalization of classical probability theory 
begins with the idea that one may be faced with a choice of experiments. 

Definition 2. A test space is a family 21 of non-empty sets, called tests, construed as the outcome- 
sets associated with various experiments, measurements, or other operations. The outcome space of 
21 is the set X := 1J21 of all outcomes arising from any test E e A. A state, or probability weight, 
on 21 is a mapping a : X — > [0, 1] summing to unity on each E e 21 — in other words, a is a 
simultaneous (and non-contextual) assignment of a probability weight to each test. 

Examples: (i) A discrete classical test space is one of the form {E}, that is, one that contains only 
a single test, (ii) One can also consider the test space consisting of finite (respectively, countable) 
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partitions of a measurable space S by measurable subsets; in this case, the states correspond exactly 
to finitely additive (respectively, countably additive) probability measures on S. (iii) The standard 
test space in quantum theory is the collection of maximal sets of pairwise orthogonal, rank-one 
projection operators on a Hilbert space H. Gleason's Theorem tells us (for dim(H) > 2) that all 
probability weights on this test space are implemented by density operators, according to the "Born 
rule". 

States and Effects Given a test space 21, it is often reasonable to consider a restricted state space 
f2. (For instance, given a qubit, we typically restrict attention to those states given by density 
operators, rather than allowing the various discontinuous states that would otherwise be allowed by 
the very loose combinatorial structure of F 2 .) Plausibly, should be both convex and closed with 
respect to outcome-wise convergence — hence, compact as a subset of [0, l] x . It should also be rich 
enough to separate outcomes, in the sense that if x, y G X and a(x) — a(y) for all a G 0, then 
x = y. We can now associate to every x G X the corresponding evaluation functional a n> a(x) in 
MP. Let E denote the span of X in MP. We shall say that the pair (21, ft) is finite- dimensional iff E 
is finite dimensional. 

Now define a cone in E by setting E + = tiXi\ti > 0,Xi G X}. Let u denote the unit functional 
u(a) = 1; then ^2 xeE x — u for every test E G 21. In particular, x < u for every x G X. It follows 
that u is an order-unit for E. If a G E* is any normalized positive functional, i.e, a(a) > for 
a G E + and a(u) = I, then we obtain a state on 21 by restriction to X. The set of states arising in 
this way defines a compact convex set f2 3 O. Call O state- complete iff O = O. It is reasonable to 
assume, and we shall assume here, that aU state spaces are state- complete. So for the remainder 
of the paper, "state" means "element of f2" . 

Processes Any test space 21 is associated with a group of symmetries, i.e., bijections g : X — > X 
with gE G 21 f-> E G 21 for all E C X. This group is compact in M. x , and acts on E by positive, 
unit-preserving linear automorphisms. Just as it may be reasonable to restrict the set of states, it 
may be desirable to consider a restricted set of symmetries. More generally, we may wish to identify 
a semigroup of "physical processes" . Such processes should surely map normalized states to possibly 
sub-normalized states, preserving convex combinations. Thus, we might represent a physical process 
by a positive mapping (f> : E* — > E*, with u{<p(a)) < u(a) for all a G E+. We interpret u{(j)(a)) as 
the probability that 4> occurs when the initial state is a. 

If <p '■ E* — >• E* is a physical process, there will be a dual process r = <p* : E —> E, given by 
</>*(a) = a o (p for any a G E. Operationally, to measure <j)*{a) on a state a, one first subjects the 
state a to the process 0, and then makes a measurement of the effect a. Note that r(u)(a) — u(t*(o)) 
is the probability that the process r* = <p occurs if the initial state is a. In what follows, it will 
generally be more convenient to deal with these dual processes; accordingly, we'll broaden our usage 
and refer to these, also, as processes. 

Probabilistic Models and Theories In view of the preceding discussion, the following language 
seems reasonable. 

Definition 3. A finite-dimensional probabilistic model is a triple A — (E(A), 21(A), T>(A)) consisting 
of 

(i) a finite-dimensional order-unit space (E(A),ua), 

(ii) a test space 21 consisting of observables on E(A), with outcome-set X = [J 21 generating E + (A), 
and 

(iii) a semigroup T>(A) of positive mappings r : E — > E, called processes, satisfying t(u) < u. 
A state of the model is a normalized, positive linear functional a : ~E(A) — > M. 
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Broadly speaking, a probabilistic theory is a class C of such models. In particular, we can identify 
finite-dimensional quantum theory with the class of models in which E is the set of hermitian 
elements of a complex matrix algebra A, with the usual operator-theoretic ordering, u is the identity 
functional, 2t consists of maximal, pairwise orthogonal sets of projection operators, and V is the 
semigroup of completely positive maps on A. 

Reversible Processes We shall say that a physical process </>, or the dual process r = <p* , is 
physically reversible iff it is invertible as a linear mapping, with a positive inverse — that is, (f> is 
an order- automorphism of E(^4)* — and cfe^ 1 is a positive multiple of a physical process — say, 
<f>~ x = c(j) for some process <f> . Operationally, this means that there is always some non-zero 
probability that (j) o cf) will return the system to its original state. Indeed, for any normalized state 
a, 

4> {4>(a)){u) = 4> (c(j)^ 1 (a))(u) = cct(u) = c, 

so this probability — which is independent of the initial state a — is exactly the factor c. Notice 
that </> is reversible with probability one iff c = 1, i.e., cf) -1 is a process. 3 This implies that r = <fi* 
satisfies t(u) — u. Conversely, if r = <j>* and tu = u, then t~ 1 u = u. Thus, if r _1 = cr Q , where t 
is a process, then, on states, then the probability of 

(cT*)(a)(u) — ca(r(u)) = ca(u) = c. 

Clearly, the set T>i(A) of invertible processes forms a sub-semigroup of V (A), and generates a 
subgroup, G{A), of Aut(E(A)), namely, the set of all multiples ct where r G T>\ and c G E + . Those 
processes reversible with probability 1 are exactly the invertible processes r G T)(A) with t(u) = u, 
i.e., those in the stabilizer Q(A) UA . 



2.2 The Jordan structure of an HSD model 

Our proof of Proposition 1, given in Section 3, depends on the details of the construction of the 
Jordan product on an HSD order-unit space. In what follows, let (E, u) be an HSD order-unit space. 
By this we mean a finite-dimensional order-unit space E, the positive cone of which is homogeneous, 
and for which there exists an inner product making E + = E + . We call such an inner product self- 
dualizing. 4 Let G be any closed subgroup of Aut(E), acting transitively on the interior of E+. Then 
G is a Lie subgroup of GL(E). Let g denote its Lie algebra, and let g u denote the Lie algebra of 
the stabilizer G u < G of the order- unit. The following formulation of the Koecher-Vinberg Theorem 
summarizes the construction of the Jordan product on E. 

Theorem 4 (Koecher-Vinberg). Let G be a closed, connected subgroup of Aut(E), acting transitively 
on the interior of E + . Then 

(a) It is possible to choose a self- dualizing inner product on E + in such a way that G u = GnC(E) 
(where 0(E) is the orthogonal group with respect to the inner product); 

(b) IfG = G^ with respect to this inner product, then g u = {X E g\X^ = -X} = {X G g\Xu = 0}, 
and g = g u © p, where p = {X G g\X^ = X}; 

(c) In this case the mapping p — > E, given by X i-> Xu, is an isomorphism. Letting L a be the 
unique element of p with L a u = a, define 

a • b = L a b 

for all a, b G E. Then • makes E a formally real Jordan algebra, with identity element u. 

3 Many authors define "reversible" by this condition, i.e. as what we have here called reversible with probability 
one. 

4 This differs slightly, but not materially, from the definition of an HSD cone in [15], where a fixed inner product 
is assumed. 
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Remark: The proof of the Koecher-Vinberg Theorem given in [15] takes G to be the connected 
identity component of the automorphism group of E. We are making the ostensibly stronger claim 
here that any homogeneously-acting, closed, self-adjoint subgroup of Aut(E) will suffice; accordingly, 
a detailed sketch of the proof is given in an Appendix to this paper. 



2.3 HSD and Jordan models 

We shall say that a model A is HSD (homogeneous and self-dual) iff the cone E + (A) is homogeneous 
under its group Q{A) of reversible processes, and equal to its dual with respect to some inner 
product. If A is an HSD model, then the Koecher-Vinberg theorem implies that E(A) carries a 
unique Euclidean Jordan structure with respect to which the order unit, ua, is the identity. 

An idempotent in E(A) is a non-zero element p G E+(A) such that p 2 — p (where p 2 = p • p). A 
non-zero idempotent that cannot be decomposed as the sum of two distinct non-zero idcmpotcnts 
is said to be primitive. The spectral theorem for Euclidean Jordan algebras (see [15], Proposition 
III. 1.2) tells us that every nonzero element of E + (A) is the sum of positive multiples of pairwise- 
orthogonal primitive idcmpotents. It follows that every extremal ray of E(A) + consists precisely 
of the nonnegative multiples of some primitive idempotent, idempotent generates such an extremal 
ray. Since the set X(A) of outcomes of the model A generates the positive cone E + (A), we can 
conclude that every primitive idempotent is a positive multiple of some outcome. However, X{A) 
may also contain some non-extremal outcomes. In this section, we identify two simple and natural 
conditions that together guarantee that every outcome is, in fact, a primitive idempotent. 

For the balance of this section, A is an HSD model, equipped with its corresponding Jordan structure 
and trace, and with the tracial inner product defined by (a,b) — tr(ab) for all a, b G E(A). Notice 
that (a, b) > for all a, b G E(A) + . A primitive idempotent e G E(^4) satisfies tr(e) = 1; hence, 
by the Cauchy-Schwarz inequality, (e, /) < 1 for all primitive idempotents /. We also have (e, e) = 
(e,u) — tr(e) = 1. Thus, a primitive idempotent e defines a pure state, (e| on A, and this is the 
unique pure state assigning probability 1 to the effect corresponding to e. 

A Jordan frame in a Euclidean Jordan algebra E is a set ei, e n of primitive idempotents summing 
to u. All Jordan frames in E have the same cardinality, called the rank of E. By a Jordan model, 
we mean an HSD model such that every outcome is a primitive idempotent, or, equivalently, every 
test is a Jordan frame. 

Let us say that a probabilistic model A is uniform iff there exists a state n G E(A)* taking a constant 
value fi(x) = l/m on all outcomes x G X(A). Note that this implies that all tests E G 21(A) have 
cardinality m. An outcome x G X(A) is unital iff there exists a state a G E* with a(x) = 1, and 
sharp if this state is unique. The model A itself is unital, respectively, sharp, iff every outcome 
x G X (A) is unital, respectively, sharp. Observe that any Jordan model is sharp (hence, unital) and 
uniform, with uniform state given by fi(x) = (u,x) = l/n, n the rank of E. We now establish the 
converse. 

Lemma 5. Let A be HSD. 

(a) Every extremal unital outcome is a primitive idempotent. 

(b) If A is uniform, then every unital outcome is extremal, hence, a primitive idempotent. 

Proof: (a) Let x G X(A) be extremal. As observed above, there exists some t > such that tx =: e, 
a primitive idempotent. Now suppose / is a primitive idempotent representing a pure state of E, 
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with (f,x) = 1. Then 

t = t(f,x) = (f,tx) = (f,e)<l, 
by the Cauchy-Schwarz inequality. Now notice that 



t 2 (x, x) — (e, e) = 1 



so (x, x) =l/t' 



2 . Choosing any E G 21(A) with a; G E, we now have 



1 = (e,u) 



i(x, w) 
*((z,x) + 



> 



yeE\{x} 

i(x,x) = i/i 2 = 



so that t >1. Thus, t = 1, and x = e. 

(b) Let x G and x = J2i s i x i where the Xi are extremal outcomes and Sj > 0. Let /x be the 

uniform state on E. Then 



so s» = 1. If a; is unital, therefore, there exists a pure state assigning probability 1 to x; hence, 
by the self-duality of E(A)+, there exists a primitive idempotent / with 



Since, as we've just seen, Sj > and ^ s, = 1, we have (f,Xi) = 1 for every i with s, ^ 0. But 
then, every Xi is a unital extremal outcome and so, by part (a), a primitive idempotent. It follows 
(again by Cauchy-Schwarz and the argument in the proof of (a)) that s, ^ implies x% = f, whence, 



It follows that any HSD model that is both uniform and unital is a Jordan model. Since, as observed 
above, the converse also holds, uniform, unital HSD models are exactly the same things as Jordan 
models. Notice that any Euclidean Jordan algebra E can be equipped with the structure of a Jordan 
model by choosing a distinguished family 21 of Jordan frames such that the set X = (J 21 generates 
E + . In particular, we can always take 21 to be the set of all Jordan frames. 



3 Composites of Jordan Models 

We now wish to examine the structure of composite systems comprising two Jordan models. We 
begin with a review of the notion of a composite of probabilistic models, following [5, 10]. 



3.1 Composites and tensor products 

Consider two systems A and B, which, while possibly interacting, retain enough independence to 
allow them to be observed and manipulated separately. We would then expect a model for the 
composite system AB to include, for each pair of effects a G E(A), b G E(_B), a product effect 
a (8) b G E(AB), with the understanding that, for a state w G E(AB)*, uj(a ® b) gives the joint 
probability to observe a and b. Moreover, we should expect that the two systems can be prepared 
independently in arbitrary states a G E(A)*, (5 G V(_B), so as to produce a product state a <g> (3 




1 = (f,x) = ^2si{f,Xi). 



x = f.D 
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with (a <g) !3){a ® b) = a(a)(3(b). Finally, if qa € G(A) and € G(F) are symmetries of A and F, 
respectively, then there should exist a symmetry g G G{AB) such that g(a <8> &) = ga® gb for all 
a e E(A) and o G E(F). 

Supposing this much, let w be a state on E(AB). We shall say that to is non-signaling iff the two 
marginal states given by 

uja(o.) := ^ cj(a ® y) and w,b(o) := ^ w(x ® 0) 

are well-defined, i.e., independent of the choice of tests F G 21(A) and F G 21(F) (This prevents 
parties controlling A and F from sending one another information solely by choosing which tests to 
measure.) It is not hard to see [36, 9] that this makes the mapping a, b i-> w(a, o) bilinear, whence, 
a, (3 i-> a(g)/3 and a, 6 i— > a (8) 6 are also bilinear, justifying the tcnsorial notation. These considerations 
motivate the following definition. 

Definition 6. A non-signaling composite of (finite- dimensional) models A and B is a model AB, 
equipped with two bilinear mappings 

<8> : E(A) x E(F) E(AB) and ® : E(A)* x E(F)* E(AB) 

smc/i i/iat 

(%) For tests £ G 21(A) and F G X(F), E <g> F = {x ® y\x e E,y e F} is a test in 2l(AB); 
(mJ (x ® j/)(a ® B) = a(x)/3(y) for all states a G F,(A)*,3 G E(F)*; 
(Hi) For all ta G V{A) and tb G T>(B), there exists a process t G Q(AB) such that 

r(a (g> B) = ta& ® t b B 

for all a G 'E(A)* , (3 G E(F)*. 

It follows from (i) that if x and y are outcomes of A and F, then x <g> y is an outcome of AF. This, 
together with condition (ii) and the bilinearity of the mappings ®, that (a <g> /3)(a <g> b) = a(a)(3{b) 
for all a G E(A),o G E(F) and all a G E(A)*,/3 G E(F)*. We also have u A ®u B = u A b- 

Definition 7. We say that AB is locally tomographic iff every bipartite state to G ~E(AB)+ is 
entirely determined by the joint probabilities uj(a,b) := uj(a ® b) that co assigns to pairs of effects 
a G E(A),b G E(F). 

If A and F are finite-dimensional (that is, if E(A) and E(F) are finite-dimensional), the con- 
dition that a non-signaling composite be local tomographic is equivalent to the condition that 
dim(E(AF)*) = dim(E(A)*) dim(E(F)*), that, is, as vector spaces (ignoring the order structure) 
E(AB)* = E(F)*<x>E(F)* and E(AB) = E(A)®E(F). Note that this makes the process r G V(AB) 
required by condition (iii) above unique, so that we can sensibly write r = ta®t B - 



3.2 Proof of Theorem 1 

We now consider the implications of the existence of a locally tomographic HSD composite, AB, of 
HSD systems A and F. Recalling the notation used in Section 3, if A is any system, let G{A) denote 
the connected identity component of the group Q{A) of invertible physical processes on A. If Q{A) 
acts homogeneously on E + , so does G(A) ([15], p. 5). 
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Since AB is HSD, we can introduce an inner product (, )ab on E(AB) that is normalized and self- 
dualizing for ~E(AB)+. We shall say that (, )ab factors, and that E(AB) is factorizably self-dual, 
iff 

(a <g> 6, c <8> rf) = (a, c) (6, d) 

for all a, c € E(A) and 6, d e E(£>) where (, )_a and are self-dualizing inner products on E(A) 
and E(_B), respectively. More generally, say that AB is factorizably self-dual iff the self-dualizing 
inner product can be chosen to factor in this way. This is not as restrictive a condition as it might 
at first seem: 

Lemma 8. Let AB be a non-signaling composite of Jordan models A and B. If AB is itself Jordan, 
then the trace form on E(AB) factors. 

Proof: By the definition of a composite, if x, y £ X{A), then x <g> y is an outcome in X(AB). Since 
x and y are unital in A and B, x <g> y is unital in X(AB): the product state (x\ <S> (y\ assigns x ®y 
probability 1 (again, by the definition of a composite). Hence, by Lemma 6 (b), x ® y is a primitive 
idempotent in F,(AB), and therefore pure. But since AB + is HSD, there is a unique pure state, 
(x <g> y\, with (a; <g> y\x <g> y) = 1. Hence, (x| <8> (y| = (x <g> y|, so that (x <8> y|a <8> 6} = (x|a)(y|6) for all 
a e E(A),6 e E(_B). Since X(A) spans E(A) and spans E(B) the same holds with arbitrary 

elements of E(A) and E(_B) in place of x and y respectively, i.e, the inner product factors. □ 

Remark: Rather than assuming that AB is Jordan (equivalently, HSD, uniform, and unital), one 
can suppose that it is HSD and that every E £ %(AB) has the same cardinality. Since 2l(AB) 
contains product tests, the cardinality of its tests must then be mn where m and n are the ranks of 
the Jordan algebras E(A) and E(_B). Now the product of the uniform state on A with the uniform 
state on B provides a uniform state on AB. Lemma 6 can then be invoked, as in the proof above. 

Lemma 9. Let AB be locally tomographic and factorizably self-dual. 

(a) Ifg £ GL(E), then (g ® l B ) t = 5 f ® Is 

(b) If g £ G(A), then g^ ® 1b is an order-automorphism ofE(AB). 

Proof: (a) For elements of ~E(AB) of the form a <8> b, we have 

((g ® ls)ai ® 6i,a 2 ® 62) = (gai, a 2 )(6i, 62) = (ai,ff t a 2 )(6i,6 2 ) = (ai ® 61, (g f ® ls)a 2 ® 62). 
Since AB is locally tomographic, such elements span E(AB), so the relation holds generally. 

(b) This now follows, since the adjoint of an order-automorphism with respect to a self-dualizing 
inner product is again an order-automorphism (cf. [15], 1.1.7). □ 

Let AB be a locally tomographic, HSD composite of HSD models A and B, and suppose ( , )ab 
is a factorizable self-dualizing inner product on E(AB), where the inner products on the factors 
are chosen in accordance with Theorem 8 (a). Let G(A)^ denote the group of adjoints where 
g £ G{A), with the adjoint defined by the chosen inner product. As noted above, the self-duality of 
E(A) ensures that G(A) t < Aut(E). Now let 

G a ■= (G(A)UG(A?), 

that is, Ga is the closed subgroup of Aut(E) generated by G(A) and G(A) 1 '. The group Ga acts 
transitively on the interior of E+, since G(A) does, and is easily seen to be self-adjoint and connected. 
Theorem 8 therefore yields, for each a £ ~E(A), a unique self-adjoint element L a of the Lie algebra 
qa of Ga, such that L u ua = a, and such that a • b := L a b defines the Jordan structure of E(A). 
Moreover, we have 
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Lemma 10. If g £ Ga, then g <g) 1b £ Gab- 

Proof: For every element g £ G(A), g <g> 1 B e G(AB) (by condition (iii) of Definition 9), whence, by 
Lemma 10, #t ® \ B belong to G(AB)t. □ 

Thus, we have a canonical embedding Ga — Ga ® {1b} < Gab- As in Theorem 4, let gA denotes 
the Lie algebra of Ga and pA, the self- adjoint part of Ga, and similarly for gAB and Pab- 

Lemma 11. For all a £ E(A), v £ E(_B), L a ® 1 B , 1a <8> Lt, G gAB- Hence, L a ® UB = L a ® 1 and 
Lu A ®v = 1a ® Lu- 

Proof: Since < Gab (via g n> <? <S> Is), and as L a e p^, we have a one-parameter group 
g ■ t ^ g t £ Ga with L a = g'(0), and a corresponding one-parameter group g ® 1 : t ^ g t ® 1 in 
Gab- The bilinearity of the tensor product gives us L a ®l = (g ® 1)'(0) £ g/iB- Since the inner 
product factors, we have 

(L„®l)t - (L„)t ® 1+ = L„ ® 1 

So L x ® 1 is a self-adjoint element of Qab, that is, an element of Pab- Also, (L a ® 1)(ua <8> «b) = 
L a «A ®«s = a®UB- The second identity is proved similarly. □ 

Corollary 12. In AB, we have 

(a (8) ub) • (& <8> v) = (a • 6) <S> v and (ua ®v)»(a®w) = a <S> (v • w). 

Proof: Taking the first identity, we have 

(a <S) u A ) • {b (8) v) = L a(SUB (b ® v) = (L a ® 1b) (b ®v) = L a b ® u = (a • b) ® u. 
Similarly for the second identity. □ 

This corollary is what we promised to establish, namely that a locally tomographic, factorizably HSD 
composite of HSD models must satisfy Hanche-Olsen's condition, (1) — hence , by Hanche-Olsen's 
theorem, the models involved are self-adjoint parts of complex G*-algebras, giving Proposition 1. 
In the language of Section 2.2, and appealing to Lemma 10, we can rephrase this as asserting that 
any locally tomographic, non-signaling theory in which all models are Jordan models, is a standard 
quantum theory. 

In the next section, we consider the implications of this result in the setting of a dagger-monoidal 
category C of HSD probabilistic models. 



4 Categorical Considerations 

It is reasonable to represent a physical theory as a category, C, in which objects represent distinct 
physical systems and morphisms represent physical processes. To capture the idea that processes 
can be composed not only serially, but also in parallel, it's equally natural to supose that C carries 
a symmetric monoidal structure. This point of view has been developed extensively by Abramsky 

5 The reader may have noticed that the only explicit use we've made of local tomography in the derivation of 
Corollary 12 is in the proof of part (a) of Lemma 11. However, to apply Hanchc-Olscn's theorem together with 
Corollary 12, we need to know that the ordinary vector space tensor product E(A) Cg) E(_B), where B is a qubit, has 
an HSD structure; this only follows if the composite AB is locally tomographic. 
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and Coecke [1] , Baez [4] , and Selingcr [33] . A striking result of this work is that many qualitative 
features of quantum information processing are actually direct consequences of the fact that the 
category of finite-dimensional Hilbert spaces and linear mappings is a dagger- compact category. 

We recall that a symmetric monoidal category is a category C, equipped with a bi-functorial operation 
® : C x C — >• C that is commutative and associative, up to natural isomorphisms A ® B ~ B <S> A and 
A ® (B ® C) ~ (A® B) ®C for objects A, B, C of C, and also equipped with a tensor unit, I, such 
that / ® ^4 ~ A for all yl G C. We shall be interested here in symmetric monoidal categories having 
probabilistic models as objects. It would be natural to take morphisms to be those positive linear 
mappings that we wish to consider physical processes; for computational convenience, however, it 
seems reasonable to enlarge the set of morphisms to include arbitrary linear combinations of such 
processes. This suggests the following: 

Definition 13. A finite-dimensional monoidal probabilistic theory is a symmetric monoidal category 
C in which 

(i) Objects are finite-dimensional probabilistic models; 

(ii) For all objects A, B G C, the set C(A, B) of morphisms A — > B is a non-trivial subspace of the 
space £(E(A), E(B)) of linear mappings (f> : ~E(A) — > E(£>), equipped with a generating cone 
C+(A, B) of positive linear mappings. Composition of morphisms is composition of mappings, 
and C+(A, B) o C+(B, C) C C+(A, C) for all A,B,C G C; 

(iii) The tensor unit / is R (with its usual order and unit), and C(I, A) = ~E(A). 

(iv) For every A G C, T>(A) is the set of all morphisms <j> G C + (A,A) satisfying 4>(ua) < ub- 
Accordingly, the group G(A) generated by reversible processes in T>(A), is exactly the group 
of invertible elements of C(A, A) having inverses in C + (A, A). 

(v) The monoidal product, AB, of two objects A, B G C, is a locally tomographic composite of the 
models A and B, in the sense of Definition 8, and the monoidal operation C(A, A') xC(B, B') — > 
C(AA', BB') is bilinear for all A',B' G C. 

By condition (ii), C(A, I) is a non-trivial subspace of E(A)*, but, absent some further constraint, 
these need not be isomorphic. Indeed, the requirement that C(A,I) ~ ~E(A)* is equivalent to 
requiring that every state a on A G C correspond to a morphism a : A — > I, hence, to an element 
of ~E(A)*. This is precisely the state-completeness assumption discussed in Section 2. Given state- 
completeness, if a G E(A)* ~ C(A, I) and a G E(A) ~ C(I, A), we have 

a(a) — ao a. 

Lemma 14. Let C be a state-complete monoidal probabilistic theory. Then for every pair of objects 
A,B G C, the composite AB is non-signaling. 

Proof: If C is state-complete, the linearity of morphisms and the bilinearity of ® together imply that 
composite systems in C are non-signaling. Suppose uj : A — > /. If E G 21(A) and y G X(B), then — 
identifying each x G E with the corresponding linear mapping x : / — > A, and similarly for y — we 
have 

^2 u(x, y) ■■= ^2 w o (x y) = x ® y) = w(«a, y) 

Similarly, ^yGF w ( x 'y) = w(x, u B ) for all F G 21(B). □ 
From this point on, we assume that C is state-complete. 
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A dagger [33] on a category C is a contravariant endo-functor 6 f : C — » C such that, for all objects 
A e C, A^ = A, and, for all morphisms 0,-0 in C, ^ = <f>. An morphism in C is unitary with 
respect to t iff it is invertible and satisfies tft^ 1 — $ . A dagger-monoidal category is a symmetric 
monoidal category equipped with a dagger that commutes with the monoidal structure, so that 
(4> ® = $ ® ift for all morphisms <p an d V" m C, and is such that the isomorphisms comprising 
the components of the natural associativity, symmetry, and unit-introduction transformations are 
unitary. 

Let C be a monoidal probabilistic theory, equipped with a dagger. Assume, further, that the dagger 
operation is linear, and positive; that is, if 6 C + (A,B), then <ft g C+(B,A). In this setting, we 
have C(A,I) ~ C(7, A) = E(A), whence, by dimensional considerations, C(A, 7) ~ E(A)* as a linear 
space. 7 also have C+(A, 7) ~ C(7, A), but the possibility remains open that C+(A, 7) is a proper 
sub-cone of the dual cone E(A)+. 

The dagger also provides us with a canonical bilinear form on each E(A), A e C, defined by 

(a, fe)^ := ^ o a 

for all a, 6 e C(7, A) ~ E(A). Since = r for every r e 1 = J, this form is symmetric: 

(b, a) = a f o 6 = (6+ o a) t = (a, = (a, 6). 

An element g of the group Q{A) of invertible morphisms in C(A, A) is said to be unitary iff = g~ x . 
We write f/(A) for the group of unitary elements of Q{A). The bilinear form (, )a is invariant with 
respect to U(A), in the sense that 

(ga, gb) A = (g o 6)t o g o a = o 5 a = fot a _ 

This bilinear form is also positive, in the sense that (a, 6) > for a, 6 ^4+- 8 Finally, observe 
(from the bifunctoriality of ®) that the canonical bilinear form factors, in the sense that, for every 
A,BsC, 

(a ® 6, c ® (Z)ab = (a, c)a(&, c?)b (2) 
for all a, c G C(7, A) ~ E(A) and all c,de C(7, B) ~ E(S). 

Definition 15. A dagger-monoidal probabilistic theory is a (state-complete) monoidal probabilistic 
theory C equipped with a (positive, linear) dagger, such that, for every A <E C, and every g G U(A), 
guA = ua- We shall call C dagger-HSD iff (i) the canonical form (,)a is an inner product (i.e., is 
positive semidefinite) and (ii) every system A in C is homogeneous with respect to C(A, A). 

Remark: The condition that (, ) be an inner product is non-trivial, but can be motivated in the case 
in which every system A G C is an irreducible Jordan model. In this case, using [38], Corollary 2 
and Lemma 6, one can show that any positive, G(AA)-invariant bilinear form on AA will in fact be 
an inner product. 

Let C be any dagger-HSD probabilistic theory. It is straightforward to verify that, if A G C and 
t G C(A,A), then G C(A, A) functions as the adjoint of a with respect to the canonical inner 
product. That is, if a, b G C(I, A) ~ A, then 

(to, b) — (r o a)* o b = a o o b = (a, T^b). 

6 A contravariant endo-functor Fona category C is a map from the morphisms of C to the morphisms of C, such 
that F(f o g) = F(g) o F(f) (as opposed to an ordinary (covariant) endo-functor, for which F(f o g) = F(f) o F(g)). 

7 Note that we take the states to be elements of C(A, I), while the effects belong to C(I, A). This is the reverse of 
the convention in many papers (e.g. [1, 33], and ourselves in [8]), and may be thought of as working in the "generalized 
Heisenberg picture" for probabilistic theories. It is motivated in part by the naturality of viewing states as functionals 
from an order-unit space (or test space) to K, and effects as dual to these. 

8 This is quite distinct from positive-definiteness, i.e., we are not claiming that (a, a) > for all u^O. 
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In particular, then, the group Q{A) is self-adjoint with respect to (,)a (i.e. x G G(A) => x^ G 
G(A)). It follows that the cone ~E(A)+ is self-dual (cf. [15], Exercise 1.8). 

In view of Proposition 1, the factorization property (2) immediately yields the corollary that every 
locally tomographic dagger-HSD theory containing at least one qubit, is a standard quantum theory 
in the sense that all of its systems are isomorphic, as ordered linear spaces, to the self-adjoint parts 
of complex matrix algebras with their standard orderings, and the monoidal product is the usual 
tensor product of quantum systems. That is, 

Proposition 16. A locally tomographic, dagger-HSD probabilistic theory in which at least one sys- 
tem has the structure of a qubit, is a standard quantum theory. 



5 Conclusions 

We have shown that, in the specific context of (finite-dimensional, state-complete) Jordan prob- 
abilistic models — that is, uniform, unital models with homogeneous, self-dual cones — defining 
features of orthodox, complex QM are 

(i) the availability of locally tomographic, non-signaling products — otherwise, a weak constraint; 

(ii) the existence of a qubit. 

Similarly, in the context of a state-complete dagger-HSD theory (where composites are automatically 
non-signaling), quantum theory is picked out by local tomography and the existence of a quibit. 

In [12], Dakic and Brukner derive QM from assumptions that also include (in effect) the existence 
of a qubit; however, they make a very strong uniformity assumption, namely, that all systems of a 
given information-carrying capacity, are isomorphic. This is not unreasonable if we imagine that all 
systems are built up, through a uniform process of composition, from a single elementary system — 
in this case, a qubit. And, indeed, in [29], it is shown that any probabilistic theory of the general 
type considered here, in which every system arises as a non-signaling, locally tomographic product 
of qubits, and in which, for every system A, the group G(A) U acts continuously on the set of pure 
states, is quantum. In contrast, our approach shows that, in the context of a probabilistic theory 
in which systems are represented by Jordan models, the mere existence of a single qubit, together 
with the possibility of forming locally tomographic, non-signaling composite systems, is enough to 
enforce all the structure of QM, including the aforementioned uniformity assumption. We have a 
similar result for any dagger-HSD theory. 

Even so, various interesting questions remain regarding HSD theories. For one thing, it would be 
very interesting to understand the possibilities for non-locally tomographic composites in such a 
theory: this should shed light on real and quaternionic QM, in particular. In a different direction, 
one would want to know whether it is possible to weaken, or entirely to dispense with, the assumption 
in Theorem 1, that the theory C includes a qubit. If so, then in the context of locally tomographic, 
non-signaling probabilistic theories in which systems are unital and uniform, or the context of 
dagger-monoidal probabilistic theories in which the canonical bilinear form is positive-definite, the 
HSD condition by itself is sufficient to rule out non-C*-algebraic theories. Of course, it would be 
at least equally interesting to construct a non-C*-algebraic, locally-tomographic, non-signaling HSD 
theory that not contain a qubit. 
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Appendix: The Koecher-Vinberg Theorem 

This appendix contains a detailed sketch of the proof of the Koecher-Vinberg Theorem. This is almost 
entirely extracted from Faraut and Koranyi [15], to whom we refer for many of the details, but with a few 
minor modifications in order to obtain the precise form of the theorem (our Theorem 8) that we required 
above. 

In what follows, E is a finite-dimensional order- unit space with a self-dual positive cone E + . By this we mean 
that there exists a self-dualizing inner product on E. Let Aut(E) denote the group of order-automorphisms 
of E. This is a Lie group, as is any closed subgroup G < Aut(E). 

When G is connected and acts homogeneously on E + (that is, transitively on the interior of E+), we can use 
this action to construct a Jordan product on E, as per Theorem 8, which, for convenience, we now restate: 

Theorem: Let G be a closed, connected subgroup of Aut(E) and let denote the Lie algebra of G u , the 
stabilizer of u in G. Then 

(a) It is possible to choose a self-dualizing inner product on E + in such a way that G u = GflO(E), where 
0(E) is the orthogonal group with respect to the chosen inner product; 

(b) If G — G^ with respect to this inner product, then 

g u = {X e s \x 1 = -X} = {Xe g\Xu = 0}, 

and q = p © q u , where p = {X € glX^ = X}. 

(c) In this case the mapping p — ¥ E, given by X h-s- Xu, is an isomorphism of linear spaces. Letting L a 
denote the unique element X G p with Xu = a, define 

a»b = L a b 

for all a, b G E. Then • makes E a formally real Jordan algebra, with identity element u. 

We break the proof into a series of Lemmas. Throughout, G is a connected, closed subgroup of Aut(E), 
acting homogeneously on the interior, E+, of the cone E + . 

Lemma A: If g G Aut(E), then g* G Aut(E), where g* is the adjoint with respect to any self-dualizing inner 
product. 

Proof: If g G Aut(E) preserves E + , then preserves E + = E + . □ 

Lemma B: Any compact subgroup of Aut(E) fixes some point a in the interior ofE+. In particular, a 
maximal compact subgroup is a stabilizer, and vice versa. Thus, all maximal compact subgroups of Aut(E) 
are conjugate. 

For a proof, see [15], Proposition I.1.8ff. 

Lemma C: For a suitable choice of self-dualizing inner product, O(E) n G < G u , where O(E) is the 
orthogonal group relative to the chosen inner product. 

Proof: If (, ) is any inner product on E with respect to which E+ = E + , one can show that 0(E) n Aut(E) 
is the stabilizer of some a G E+ ([15], Proposition 1.1.9). It follows that O(E) n G < G a - Since G acts 
transitively on E+, we can find some g G G with ga = u; replacing (, ), if necessary, by the inner product 
{x,y) g := (gx,gy) — which is also self-dualizing, by [15], Proposition 1.1.7 — we can assume that a = u, 
whence, that O(E) n G < G u . □ 

This gives us part (a) of the Theorem. 

Now let K = G n 0(E), and let I denote K's Lie algebra. Notice that t = gfl o(E) = {X G = -X}. 
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Corollary 1: Let the inner product on E be chosen as per Lemma C. Let K — G n 0(E), and let t be the 
Lie algebra of K, and let g u denote the Lie algebra of G u < G. Then 

(a) G u is connected; 

(b) G u = K; 

(c) g u = t; 

Proof: (a) G/G u is homeomorphic to the simply connected space E+; hence, as G is connected, so is G u 
(see, e.g., [23], Proposition 1.94). It follows that if G u and K have the same Lieq algebra, they coincide — 
in other words, (b) follows from (c). To prove (c), note that since K < G u , by the choice of inner product, 
we have t < g u - For every X £ g u < 0, we have the decomposition X — X\ + X2 with X\ self-adjoint and 
X2, skew-adjoint. Since X2 £ t C g u , it follows that Xi — X — X2 £ g u as well, whence, e tXl £ G u for all 
t. However, G u is compact, so this implies that e tXl is bounded as a function oft. Since Xi is self-adjoint, 
this is possible only if Xi = 0. Hence, X — X2 € t, and we have g„ < □ 

Proof of Part (b): Suppose now that G is self-adjoint with respect to the self-dualizing inner product chosen 
in Lemma C. Then, for every X £ g, X* £ g. To see this, let X = Y(0) where 7 : R — > G is a smooth path 
with 7(0) = 1, and note that 7* : t 1 — >■ 7(f)* is another such path, with 7*'(0) = X* . It now follows that, 
for every I 6 j, X\ := (X + X^)/2 and X 2 = {X - X f )/2 also lie in g; we have X = X 1 + X 2 , so that g 
decomposes as the direct sum g = p + t, where p is the space of self-adjoint elements of g and t, the space 
of skew-adjoint elements. This establishes part (b) of the Theorem. 

Remark: Note also, for later reference, that if X, Y £ p, we also have [X, Y] £ g and [X,F] t = [Y,X] = 
-[X,Y],i.e., [X,Y]€t. 

The interior, E^, of the cone E+ is a smooth manifold, on which G acts smoothly. Thus, we have a 
canonical smooth mapping <j) ■ G — > E+ given by g >->■ gu. Differentiating this, we obtain a linear mapping 
d(j)(l) : g -> T„(E° ) = E. Explicitly, if X = j'(0) £ g, where 7 is a smooth path in G with 7(0) = 1, then 

#(1)(X) = |<M7(t)) t =o = 7 '(0)u = Xu. (3) 
Lemma D: Let X £ g. Then X € t iff Xu = 0. 

Proof: Suppose d<p(l)(X) — Xu — 0, where X — y'(0). The vector-valued function v(t) = e tx u then 
satisfies 

v — Xv = Xe tx u = e tx Xu = 0. 

It follows that v is constant, i.e, that e tx u = u for all t. But then e tx £ G u , so that X = ^e tx \ t =a £ t. 
Conversely, if X € t, then X = 7 '(0) where 7 (t) £ K and 7(0) = 1, so that Xu = 7'(0)w = [^(7(*)«)]t=o - 
[7(t)^«]t=o = [^(7(*)«)]t=o = ii u |t=o = (the last equality uses 7(f) £ if and & = u). □ 

Corollary 2: d<f>{l) : p ~ ron(d</>(l)) < E. 

Proof: By Lemma D and (3), t is the kernel of d(f>(l); as established above (in the proof of part (b) of Lemma 
C, g = pet. □ 

Lemma E: ran(d(j>(V)) is all o/E, i.e., d<f>{l) : p ~ E. 

Proof: Note, first, that T g (G) = gT\(G) = gg for any g £ G. We also have 

{dct>{g)){gX) = gXu 

for all X £ g. Hence, ran(d^(g)) = gran(d0(l)). If the latter is not all of E, then every g is a critical point 
of <f>, whence, every point <f>(g) = gu £ E is a critical value. Sard's Theorem now tells us that Gu = E^ has 
measure zero, a contradiction. □ 
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Construction of the Jordan product Now define L x £ p to be the unique self-adjoint element of g with 
L x u — x. Set x • y = L x y for all i,j6E. This is evidently bilinear. A series of computations (see [15], pp. 
49-50) shows that it makes E a formally real Jordan algebra with identity element u. Specifically, 

(1) x • y = y • x since x»y — yx = x»(y u)u — y • (x • u) = [L x , L y ]u = (as remarked above following 
the proof of Corollary 1, X, Y € p [X, Y] G t, and, by Lemma D, tu = 0); 

(2) x • u — L x u — x by definition of L x , so u serves as the identity; 

(3) The product satisfies the Jacobi identity. This is proved exactly as in [15] . Note that the argument uses 
the fact that the inner product is associative, which follows from L x being self-adjoint. This also then gives 
us that the Jordan algebra E is formally real. 

This completes the proof of the Koecher-Vinberg Theorem. □ 
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